As you may already know, Microsoft has provided Right Management Services capabilities on Office 365 – if you are not aware, check this post to see how to enable and configure RMS for use with Office 365 http://blog.hametbenoit.info/2013/03/07/office-365-use-right-management-services/
In this post, we will see how to manage RMS templates.
An RMS template is a defined rule to automatically protect your document/message with digital rights; by default you only have 3 templates:
- Restricted / Do not forward – depending if you are using Outlook client or another Office application
- Confidential
- Confidential view only
If you want to create additional rules, go to the Office 365 administration portal – https://portal.microsoftonline.com – and logon using an administrative account
Then go the Service Settings from the left menu and to the Rights Management tab to click to the Manage link
If you already have enabled RMS you should have an Additional Configuration button available
If you click on it, you will be redirected to the Microsoft Azure configuration section
NOTE you can also go directly to the RMS configuration on Microsoft Azure from the Microsoft Azure administration portal – https://manage.windowsazure.com – and then to the Active Directory left menu
Click on your Active Directory to manage RMS templates
From there, you will be able to manage (update) existing RMS templates or create a new one (which could be a copy of an existing one)
NOTE default RMS templates (Confidential and Confidential View Only) can not be updated
Create a new RMS template
If you hit the Create a new rights policy template link (from the Wizard) or the Add button below you will be asked to choose a language, name your template and a description (this field is mandatory)
Once your new template has been created, just hit the arrow to go to his configuration
From there a wizard will assist you in the configuration
Start by defining users and groups to which the template will apply
This will interrogate your Active Directory (which is off course synchronized with Office 365); just select the group(s) and/or user(s); this does not return default users or groups from Active Directory – as All Authenticated Users, Administrator…
Then go to Step 2 to define the rights to be used for this template
If you choose Custom you will be able to define granular permissions such as save file, view content…
Then complete the wizard to get the template created
The RMS template is now created and displayed the user(s)/group(s) assigned to this template with their corresponding rights
If you hit the Configure link available on top of this list, you will be able to add additional languages, define an expiration period and if the content should be available offline
Once you have done all your configur